ui-ux-research
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata and text from external research results which are interpolated into the agent's context during the research phase.
- Ingestion points: Results retrieved from Mobbin API tools (screens, flows, and sections) are consumed in SKILL.md to formulate research notes.
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings to isolate ingested external metadata from the agent's internal instructions.
- Capability inventory: The agent has access to project file systems and CLI tools as described in SKILL.md and the configuration instructions in references/mobbin.md.
- Sanitization: There is no requirement for the agent to sanitize or validate external content before it is included in the project's design documentation or screen briefs.
Audit Metadata